CVE-2020-10038

🗓️ 14 Jul 2020 13:18:04Reported by siemensType

Vulnerability in SICAM MMU, SGU, and T versions allowing unauthorized administrative command executio

Reporter	Title	Published	Views	Family All 10
CNVD	Siemens SICAM MMU, SGU and T Access Control Error Vulnerability	15 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-10038	14 Jul 202013:18	–	cvelist
EUVD	EUVD-2020-2503	7 Oct 202500:30	–	euvd
ICS	Siemens SICAM MMU, SICAM T, and SICAM SGU	14 Jul 202000:00	–	ics
NVD	CVE-2020-10038	14 Jul 202014:15	–	nvd
OSV	CVE-2020-10038	14 Jul 202014:15	–	osv
Tenable Nessus	Siemens Sicam Missing Authentication for Critical Function	10 Aug 202100:00	–	nessus
Tenable Nessus	Siemens SICAM MMU, SICAM T, and SICAM SGU Missing Authentication For Critical Function (CVE-2020-10038)	7 Feb 202200:00	–	nessus
Prion	Authentication flaw	14 Jul 202014:15	–	prion
RedhatCVE	CVE-2020-10038	22 May 202515:50	–	redhatcve

NVD

Node

siemens sicam_mmu_firmwareRange<2.05

AND

siemens sicam_mmuMatch-

Node

siemens sicam_sgu_firmwareMatch-

AND

siemens sicam_sguMatch-

Node

siemens sicam_t_firmwareRange<2.18

AND

siemens sicam_tMatch-

[
  {
    "product": "SICAM MMU",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.05"
      }
    ]
  },
  {
    "product": "SICAM SGU",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SICAM T",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.18"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf

21 Nov 2024 04:54Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

CVSS 3.19.8

EPSS0.00392

CWE-306